medium4.3
CVE-2020-25025
Incorrect Authorization in TYPO3 extension
Impact
The l10nmgr (aka Localization Manager) extension before 7.4.0, 8.x before 8.7.0, and 9.x before 9.2.0 for TYPO3 allows Information Disclosure (translatable fields).
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| composer | localizationteam/l10nmgr | < 7.4.0 | 7.4.0 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Localization Manager Project | Localization Manager | before 7.4.0 from 8.0.0 before 8.7.0 from 9.0.0 before 9.2.0 |